Description
LaRecipe 是一个用于构建开发文档的开源工具。其 /docs/1.0 路径存在模板注入漏洞，攻击者可能通过该漏洞注入恶意代码，导致系统安全性降低，甚至可能被完全控制。
LaRecipe 服务器端 /docs/1.0 代码执行漏洞 （CVE-2025-53833）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/gobybot/p/18988116
https://cloud.tencent.com/developer/article/2630093
https://blog.csdn.net/devops8pract/article/details/151920006
https://www.knowsafe.com/ti/info/0/998482
https://nvd.nist.gov/vuln/detail/CVE-2025-53833
https://github.com/saleem-hadad/larecipe/security/advisories/GHSA-jv7x-xhv2-p5v2
https://www.sentinelone.com/vulnerability-database/cve-2025-53833/
https://www.miggo.io/vulnerability-database/cve/CVE-2025-53833
https://dbugs.ptsecurity.com/vulnerability/PT-2025-29522